From 6adb943f580162ea6348e3910926fc2fcefcfa79 Mon Sep 17 00:00:00 2001
From: Franck Cuny <franck@fcuny.net>
Date: Tue, 12 Aug 2025 10:12:39 -0700
Subject: add profiles for security, firewalls, and users

---
 profiles/network/firewall.nix | 10 ++++++++++
 1 file changed, 10 insertions(+)
 create mode 100644 profiles/network/firewall.nix

(limited to 'profiles/network/firewall.nix')

diff --git a/profiles/network/firewall.nix b/profiles/network/firewall.nix
new file mode 100644
index 0000000..1b30c84
--- /dev/null
+++ b/profiles/network/firewall.nix
@@ -0,0 +1,10 @@
+{ ... }:
+{
+  networking = {
+    firewall = {
+      enable = false;
+      allowPing = true;
+      logRefusedConnections = false;
+    };
+  };
+}
-- 
cgit v1.2.3